PT-2026-3672 · Oracle · Oracle Planning/Budgeting Cloud Service+1

Patrick Murphy · Publicado 2026-01-20 · Atualizado 2026-01-21 · CVE-2026-21922

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:S/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions Oracle Planning and Budgeting Cloud Service versions 25.04.07

Description A flaw exists in the Oracle Planning and Budgeting Cloud Service, specifically within the EPM Agent component. A highly privileged attacker with access to the system can compromise the service. Exploitation requires interaction from a user other than the attacker and can lead to unauthorized modification, deletion, or creation of data within Oracle Planning and Budgeting Cloud Service.

Recommendations Update EPM Agent. Refer to documentation for downloading the EPM Agent.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

BDU:2026-00685

CVE-2026-21922

Produtos afetados

Epm Agent

Oracle Planning/Budgeting Cloud Service

Referências · 5

• https://oracle.com/security-alerts/cpujan2026.html · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2013783034416492564 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2026-21922 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2026-00685 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2026-21922 · Nota de Segurança